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Top Stories 

• General Motors announced March 28 that it is adding 971,000 vehicles to a previous recall 
concerning defective ignition switches that can turn off and cut power to vehicles. - 
Associated Press (See item 5) 

• The U.S. Securities and Exchange Commission announced charges and asset freezes March 
28 against the operators of an alleged pyramid scheme that raised more than $65 million 
from Asian and Latino communities in the U.S. and abroad. - U.S. Securities and 
Exchange Commission (See item 9) 

• The last of 13 individuals charged in a Ponzi-like $1.25 billion insurance fraud scheme was 
convicted March 28 in Miami on fraud and conspiracy charges. - Fort Lauderdale Sun 
Sentinel (See item 10) 

• Officials in Danville, Virginia, will close Abreu-Grogan Park beginning April 1 in order 
for Duke Energy crews to clean up a large coal ash deposit from the Dan River near the 
Schoolfield Dam. - Danville Register & Bee (See item 25) 
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Energy Sector 



1. March 27, Lexington Herald-Leader - (Kentucky) 50 citations were issued to three 
Kentucky mines in February. The U.S. Mine Safety and Health Administration 
reported March 27 that federal inspectors issued a total of 50 citations to Nally & 
Hamilton Enterprises, Armstrong Coal Company, and Redhawk Mining LLC, for 
alleged health and safety violations found during February inspections at their mines in 
Kentucky. 

Source: http://www.kentuckv.com/2014/03/27/3165602/5Q-citations-were-issued-to- 
three.html 

[ Return to top ] 

Chemical Industry Sector 

2. March 28, KSHB 41 Kansas City - (Missouri) Anhydrous ammonia leak in Platte 
Co. capped. A broken valve on an 800-gallon tank located in a Platte County field 
caused anhydrous ammonia to leak for nearly 1 hour March 28 before crews were able 
to cap the valve. Nearby roadways were closed and evacuations were recommended for 
those within a half-mile radius of the tank during the incident. 

Source: http://www.kshb.com/news/local-news/crews-respond-to-anhydrous-ammonia- 
leak-in-platte-co 

T Return to top i 

Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 



T Return to top i 

Critical Manufacturing Sector 

3. March 31, Softpedia - (International) Hackers can unlock Tesla cars by stealing 
owners’ passwords. A security researcher reported that the password created by Tesla 
car owners can be easily obtained via brute force attacks due to it only containing six 
letters and numbers, allowing attackers to track the location of Tesla cars or unlock the 
door locks remotely. The remote management API also may share credentials with 
untrusted third parties that could also lead to security issues. 

Source: http://news.softpedia.com/news/Hackers-Can-Unlock-Tesla-Cars-bv-Stealing- 
Owners-Passwords-434979.shtml 

4. March 31, Edmunds.com - (National) 2014 Honda Civic LX recalled for possible 
tire damage. Honda announced a recall for 9,817 model year 2014 Civic LX vehicles 
due to potential tire damage during mounting, creating the risk of the tires losing air. 
Source: http://www.edmunds.com/car-news/2014-honda-civic-lx-recalled-for-possible- 
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tire-damage.html 



5. March 29, Associated Press - (National) GM adding 971,000 vehicles to ignition 
recall. General Motors announced March 28 that it is adding 971,000 vehicles to a 
previous recall concerning defective ignition switches that can turn off and cut power to 
vehicles. The recall expansion covers several Chevrolet, Pontiac, and Saturn vehicles 
from model years 2003-2007 that may have had defective ignition parts installed during 
repairs. 

Source: http://abcnews.go.com/Business/wireStory/gm-adding-824000-vehicles- 
ignition-recall-23 106921 

6. March 28, Associated Press - (Indiana) Acid tank explosion at Rolls-Royce plant 
injures 9. Nine workers were injured March 28 when a 250-gallon tank of nitric acid 
exploded and created a cloud of corrosive vapor at a Rolls Royce aircraft engine 
assembly plant in Wayne Township, Indiana. Remaining shifts at the plant that day 
were canceled but shifts were scheduled to proceed normally March 30. 

Source: http://www.wtsp.com/storv/news/nation-now/2014/03/28/acid-tank-explosion- 
rolls-royce-plant/7036155/ 

T Return to top i 



Defense Industrial Base Sector 



See item 6 
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Financial Services Sector 

7. March 29, Chicago Sun-Times - (Illinois) ‘Benchwarmer Bandit’ robs fourth bank 
in two weeks. A suspect known as the “Benchwarmer Bandit” is thought responsible 
for the robbery of a Citibank branch in the Lake View area of Chicago March 29, the 
fourth robbery tied to the suspect. 

Source: http://chicago.cbslocal.com/2014/03/29/benchwarmer-bandit-robs-fourth-bank- 
in-two-weeks/ 

8. March 29, Associated Press - (International) Sally Beauty’s security breach grows in 
scope. Beauty products retailer Sally Beauty reported March 28 that a data breach 
exposed a larger number of payment card records than the less than 25,000 previously 
estimated by the company. 

Source: http://abcnews.go.com/Business/wireStorv/sallv-beautys-securitv-breach- 
grows-scope-23 106485 

9. March 28, U.S. Securities and Exchange Commission - (International) SEC halts 
pyramid scheme targeting Asian and Latino communities. The U.S. Securities and 
Exchange Commission announced charges and asset freezes March 28 against the 
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operators of an alleged pyramid scheme that raised more than $65 million from Asian 
and Latino communities in the U.S. and abroad. The alleged scheme operates under 
names such as WCM and WCM777 and is based in California and Hong Kong, under 
the control of a Temple City, California man. 

Source: http ://w w w. sec. go v/New s/Pres sRelease/Detail/Pres sRelease/ 137054 1324305 

10. March 28, Fort Lauderdale Sun Sentinel - (Florida) Ex-chief of Mutual Benefits 
Corp. guilty in $1.25 billion fraud. The last of 13 individuals charged in a Ponzi-like 
$1.25 billion insurance fraud scheme was convicted March 28 in Miami on fraud and 
conspiracy charges. The fraud occurred through Mutual Benefits Corporation, which 
deceived around 30,000 investors to obtain the money between 1994 and 2004. 

Source: http://www.sun-sentinel.com/news/broward/fl-mutual-benefits-chief-guiltv- 
20140328,0,5802869.story 

For another story, see item 38 
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Transportation Systems Sector 

11. March 31, Chicago-Sun Times - (Illinois) Blue Line station at O’Hare, scene of 
derailment, reopens. Chicago Transit Authority restored L service to O’Hare 
International Airport March 30 after a Blue Line train crashed onto the platform March 
24, leaving 32 people injured. Officials are still investigating the incident. 

Source: http://www.suntimes.com/26531723-418/blue-line-station-at-ohare-scene-of- 
derailment-to-reopen-2-pm-sunday.html 

12. March 30, WDIV 4 Detroit - (Michigan) 3 hospitalized after Sunday morning 
shooting on 1-96 in Detroit. A portion of Interstate 96 in Detroit was closed for 
approximately 2 hours March 30 after a shooting in the westbound lanes which left 3 
people injured. 

Source: http://www.clickondetroit.com/news/3-people-in-the-hospital-following- 
ovemight-shooting-on-i96/25234496 

13. March 29, Beaufort County Island Packet - (South Carolina) 6 Carolina Cup-goers 
injured after 2 buses try to avoid couch on 1-20. Interstate 20 in Kershaw County 
was closed for 2 hours after 6 people were injured when one bus swerved to avoid 
debris in the roadway and was rear-ended by the second bus which also swerved to 
avoid the debris. 

Source: http://www.islandpacket.com/2014/03/29/303Q215/6-carolina-cup-goers- 
treated-for.html 

14. March 29, KCNC 4 Denver - (Colorado) 1 dead after plane crash in Douglas 
County. The pilot of a small experimental plane was killed after crashing in a grassy 
area of Highlands Ranch in Douglas County, Colorado, March 29. Authorities are 
investigating the crash. 
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Source: http://dcnvcr.cbslocal.com/2Q14/03/29/l-dcad-aftcr-planc-crash-in-douulas- 
county/ 



15. March 28, WDAM 7 Laurel - (Mississippi; Louisiana) Train derails in Jones County, 
parts of Hwy 11, now accessible. Jones County officials reported that 19 out of 101 
cars derailed March 28 on a section of Highway 1 1 in Ellisville, prompting the closure 
of the highway and main rail line from New Orleans to Meridian for several hours. 
Authorities are investigating the cause of the derailment. 

Source: http://www.wdam.com/story/25098967/iones-countv-train-derails 
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Food and Agriculture Sector 

16. March 31, WEAU 13 Eau Claire - (Wisconsin) Fire burns barn full of bees. Embers 
from a bee pot smoker ignited straw chaff and a fire spread throughout a barn in Eleva, 
causing the structure collapse March 30. One worker suffered minor injuries and 
authorities estimated the damage to total $200,000. 

Source: http://www.weau.com/home/headlines/Fire-bums-down-barn-full-of-bees- 
253175951.html 

17. March 30, Food Poisoning Bulletin - (Washington) FDA closes Jensen’s Old 
Fashioned Smokehouse. The U.S. Food and Drug Administration ordered Jensen’s 
Old Fashioned Smokehouse, a processor and distributor of smoked fish products in 
Seattle, to close after inspectors performed an analysis of environmental samples, 
which confirmed the presence of Listeria monocytogenes in the facility. Several 
requirements must be met before Jensen’s can resume operations. 

Source: http://foodpoisoningbulletin.com/2014/fda-closes-iensens-old-fashioned- 
smokehouse/ 

18. March 28, U.S. Food and Drug Administration - (National) Fresh Express issues 
recall of limited quantity of already expired Italian Salad due to possible health 
risk, no illnesses cited. The U.S. Food and Drug Administration announced that Fresh 
Express Incorporated announced a recall for a limited quantity of its 10-ounce and 6- 
ounce Italian Salad products with an already expired use-by date due to possible 
Listeria monocytogenes contamination. The expired product has already been removed 
inventories and no illnesses have been reported in association with the recall. 

Source: http://www.fda.gov/Safety/Recalls/ucm391048.htm 

[ Return to top ] 

Water and Wastewater Systems Sector 

19. March 31, WHO 13 Des Moines - (Iowa) Boil order: Norwalk water main break. 
The city of Norwalk, Iowa, was placed under a boil water order beginning March 30 
after a water main break led to a loss of pressure. Schools in the city cancelled classes 
March 3 1 due to the order. 
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Source: http://whotv.com/2014/03/31/boil-order-norwalk-water-main-break/ 



20. March 29, KDKA 2 Pittsburgh - (Pennsylvania) Boil water alert lifted after North 
Huntingdon water main break. A boil water notice issued March 25 that affected 
around 4,300 customers in North Huntingdon was lifted March 29. The notice was 
prompted by a water main break that occurred when workers using dynamite collapsed 
a 30-inch line on a hillside March 24. 

Source: http://pittsburgh.cbslocal.com/2014/Q3/29/boil-water-alert-lifted-after-north- 
huntingdon-water-main-break/ 

For another story, see item 25 
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Healthcare and Public Health Sector 



21. March 28, San Diego Union-Tribune - (California) Data stolen from 5,000 patients. 
Palomar Health notified about 5,000 patients March 28 of a potential personal data 
breach after a company laptop and two flash drives were stolen in February from an 
employee’s vehicle parked in Oceanside. Police arrested an individual believed to be 
tied to the sale of the stolen items March 17 and authorities continue to investigate the 
incident. 

Source: http://www.utsandiego.com/news/2014/mar/28/palornar-health-data-theft- 
5000-patients/ 



[ Return to top ] 



Government Facilities Sector 

22. March 30, Los Angeles Times - (California) Brea school to close for further 
inspection of earthquake damage. Fanning Elementary School in Brea was closed 
March 31 for safety inspections after a March 28 earthquake damaged the building. 
Classes were expected to resume April 1. 

Source: http://www.latimes.com/local/lanow/la-me-brea-school-closure- 
20140330,0,62478 lO.story 

23. March 28, WLKY 32 Louisville - (Kentucky) 4 students injured in crash involving 
school bus. An accident involving a Frost Middle School bus left four students injured 
March 28 in Louisville. 

Source: http://www.wlkv.com/news/iniurv-accident-involving-school-bus-at-35th-st- 
and-del-park/25209094 

24. March 28, FlaglerLive.com - (Florida) Bomb threat phoned in forces evacuation of 
Flagler County Courthouse; all-clear at 4:30p. A phoned bomb threat forced a 4 
hour evacuation and closure of the Flagler County Courthouse in Florida March 28. 
Police searched the building and cleared the scene after nothing suspicious was found. 
Source: http://flaglerlive.com/65549/courthouse-bomb-threat/ 
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25. March 28, Danville Register & Bee - (Virginia) Park to close for ash cleanup. 
Officials in Danville, Virginia, will close Abreu-Grogan Park beginning April 1 in 
order for Duke Energy crews to clean up a large coal ash deposit from the Dan River 
near the Schoolfield Dam. Duke Energy authorities expect work to be completed and 
the park to reopen in July. 

Source: http://www.godanriver.com/news/coal-ash/park-to-close-for-ash- 
cleanup/article df8138c6-b6c7-lle3-92ba-0017a43b2370.html 

26. March 28, KTVO 3 Kirksville - (Iowa) Cardinal classes canceled due to power 
outage. An issue with a transformer pole caused a power outage that forced Cardinal 
Community School District in Eldon to cancel classes March 28. 

Source: http://www.heartlandconnection.com/news/story.aspx?id=1024790 

For another story, see item 19 
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Emergency Services Sector 

27. March 30, Associated Press - (New Mexico) Albuquerque police website under 
cyberattack. The Albuquerque Police Department reported that its Web site was down 
for several hours March 30 due to a cyberattack, and the department continued to 
investigate the incident while IT personnel worked to resolve the disruption. 

Source: http://news.msn.com/crime-iustice/albuquerque-police-website-under- 
cyberattack 



T Return to top i 

Information Technology Sector 

28. March 28, Threatpost - (International) FTC settles with Fandango, Credit Karma 
over SSL issues in mobile apps. Fandango and Credit Karma agreed to a settlement 
with the Federal Trade Commission (FTC) after the FTC charged that both companies 
deliberately misrepresented the security of their mobile apps and created apps that 
failed to validate SSF certificates. The companies are required by the settlement to 
submit to independent security audits for the next 20 years and to create comprehensive 
security programs. 

Source: http://threatpost.com/ftc-settles-with-fandango-credit-karma-over-ssl-issues-in- 
mobile-apps/105128 

29. March 28, IDG News Service - (International) Philips smart TVs open to remote 
attacks via default wireless connection, researchers say. Researchers at ReVuln 
published a demonstration video showing that the newest firmware for some Philips 
smart TVs opens an insecure Miracast wireless network that could allow attackers 
within signal range to control the TV. The Miracast feature is vulnerable to attackers 
due to a hard-coded password. 

Source: http://www.networkworld.com/news/2014/032814-philips-smart-tvs-open-to- 
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280196.html 



For another story, see item 3 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 



T Return to too l 



Communications Sector 

30. March 31, Omaha World-Herald - (Wyoming) FCC imposes $17,000 fine on owner 
of mysterious radio station KOMJ. The U.S. Federal Communications Commission 
ordered Wyoming -based Cochise Broadcasting, owner of KOMJ 1490 AM Omaha, to 
pay a $17,000 fine for failing to operate and staff a main studio with a public inspection 
file for the station. 

Source: http://www.omaha.com/article/20140329/MQNEY/140328596/1707 

31. March 30, Associated Press - (Massachusetts) North Adams restores emergency 
communications lost when radio towers collapse. Two communications towers on 
Florida Mountain suffered damage and collapsed March 30 due to high winds and 
heavy rain, interrupting cell phone and Internet services for about 13,500 residents in 
the North Adams area. Emergency service was restored after about 1 1 hours and 
Pittsfield Communications crews worked to install a portable tower and transmitters in 
an effort to restore service by the end of March 31. 

Source: 

http://www.masslive.com/news/index.ssf/2014/03/north adams restores emergency.ht 
ml 
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Commercial Facilities Sector 

32. March 31, KHOU 11 Houston - (Texas) Residents evacuate as 2-alarm fire destroys 
west Houston apartments. A 2-alarm fire at the Woodlake Oaks Apartments in 
Houston caused a partial building collapse and forced more than 100 residents to 
evacuate March 31. No injuries were reported and authorities are investigating the 
cause of the fire. 

Source: http://www.khou.com/news/local/HFD-battling-2-alarm-apartment-fire-in- 
west-Houston-253174131.html 

33. March 31, Minneapolis Start Tribune - (Minnesota) 20 people displaced by 

Minnetonka apartment fire; no one injured. About 20 residents were displaced after 
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a fire broke out March 30 at the Cedar Ridge Apartments in Minnetonka, leaving 6 
units uninhabitable. The cause of the fire is under investigation. 

Source: http://www.startribune.com/local/west/253140211.html 

34. March 31, Garden Island - (Hawaii) Odor closes Walmart. A strange odor at a 
Walmart store in Lihue forced patrons and workers to evacuate for nearly 3 hours 
March 30 while crews investigated and ventilated the area. Authorities performed air 
monitoring but were unable to determine the source of the odor that prompted nine 
individuals to seek medical treatment. 

Source: http://thegardenisland.com/news/local/odor-closes-walmart/article 505eddac- 
b892-lle3-9099-0019bb2963f4.html 



35. March 29, Bay News 9 Tampa Bay - (Florida) Storms interrupt Grand Prix, keep 
attendance down. Severe weather prompted authorities at the Firestone Grand Prix of 
St. Petersburg to evacuate the grandstands and open areas and seek shelter for more 
than 2 hours March 29. Activity resumed after a tornado watch was lifted and the 
weather passed. 

Source: 

http://www.bavnews9.com/content/news/bavnews9/sports/article.html/content/news/art 
icles/bn9/20 14/3/29/ grand prix day 2 upd.html 

36. March 29, WBNS 10 Columbus - (Ohio) Awning fire at Celeste Center forces 
evacuation during circus. An electrical fire causing an awning to catch fire at the 
Celeste Center in Columbus March 29 and prompted the arena to evacuate during a 
circus performance. The arena reopened March 30. 

Source: http://www.10tv.com/content/stories/2014/03/29/columbus-shrine-circus- 
evacuated-awning-fire.html 

37. March 29, KSDK 5 St. Louis - (Missouri) Apartment fire forces 161 residents to 
seek emergency shelter. A March 28 fire on the top floor of the Santa Ana Apartments 
in St. Ann triggered the building’s sprinkler system, which flooded every floor below 
and displaced 161 residents. 

Source: http://www.ksdk.com/story/news/2014/03/29/st-ann-santa-ana-apartments- 
fire/7071415/ 



38. March 28, Houston Business Journal - (Texas) Spec's falls victim to network attack, 
customer information compromised at dozens of stores. The Houston-based Spec’s 
wine and liquor store chain announced March 28 that a security breach exposed some 
personal data, such as check and payment card information, of customers who shopped 
at 34 of its Texas stores between October 2012 and March 2014. The company is 
investigating the attack and has taken steps to mitigate the issue. 

Source: http://www.bizioumals.com/houston/news/2014/03/28/specs-falls-victim-to- 
network-attack-customer.html 
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Dams Sector 



Nothing to report 
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NO ACTIVE ALERTS 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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